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Amendments to the Claims: 

This listing of claims is to replace all prior versions and listings of claims in 
this application: 

1. (Currently Amended) A method comprising; 

receiving an original digital good; and 

randomly applying various forms of protection to a plurality of segments of 
the original digital goo d to generate a plurality of protected segments to be 
included in a protected digital good; 

generating a plurality of checkpoints, each of the checkpoints being 
associated with at least one of the protected segments, the check point being 
operable to cause a system receiving the protected digital good to validate that at 
least one protected segment with which the checkpoint is associated has not been 
tampered with: and 

assembling the protected digital good bv collecting the plurality of 
protected segments , wherein at least two of the segments overlap one another, the 
overlapping segments being different from each othe r, and the checkpoints are 
inserted in the protected digital good at varying positions relative to the protected 
segments with the checkpoints are associated , 

2. (Original) A method as recited in claim 1, wherein the randomly applying 
comprises pseudo randomly applying the various forms of protection according to 
pseudo random techniques. 
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3. (Original) A method as recited in claim 1, wherein the applying comprises 
randomly selecting the forms of protection from a set of available forms of 
protection. 

4. (Original) A method as recited in claim 1, wherein the applying comprises 
applying the various forms of protection to randomly selected portions of the 
original digital good. 

5. (Original) A method as recited in claim l s wherein the various forms of 
protection are selected from a group of protection tools comprising code integrity 
verification, acyclic code integrity verification, cyclic code integrity verification, 
secret key scattering, obfuscated function execution, encryption/decryption, 
probabilistic checking, Boolean check obfuscation, in-lining, reseeding pseudo 
random number generators with time varying inputs, anti-disassembly methods, 
varying execution paths between runs, anti-debugging methods, and time/space 
separation between tamper detection and response. 

6. (Original) A method as recited in claim 1, wherein the applying comprises 
applying a form of protection in which a checksum can be computed on a set of 
bytes of the digital good without actually reading the bytes. 

7. (Original) A computer-readable medium comprising computer-readable 
instructions that, when executed by a processor, direct a computer system to 
perform the method as recited in claim 1. 
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8. (Currently Amended) A method comprising: 

segmenting a digital good into a plurality of segments; 
selecting multiple segments from the plurality of segments; and 
transforming only the selected segments according to different protection 

techniques to produce a protected digital good having a composite of variously 

protected segments; 

augmenting at least one segment using a certain protection technique: and 
inserting a checkpoint within the protected digital good but outside of the 

augmented segment and at a varying position relative to the augmented segment 

the checkpoint being suitable to evaluate a validity of the augmented segment . 

9. (Original) A method as recited in claim 8, wherein at least two of the 
segments overlap one another. 

10. (Original) A method as recited in claim 8, wherein the selecting comprises 
randomly selecting the segments. 

11. (Original) A method as recited in claim 8, wherein the transforming 
comprises transforming the selected segments according to randomly chosen 
protection techniques. 

12. (Canceled). 
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1 13* (Original) A method as recited in. claim 8, further comprising receiving 

2 quantitative parameters indicative of how much the protected digital good should 

3 be altered. 

4 

s 14. (Original) A method as recited in claim 13, wherein the transforming is 

6 performed to satisfy the quantitative parameters, 

7 

s 15. (Original) A method as recited in claim 8, wherein the protection 

9 techniques are selected from a group of protection tools comprising code integrity 

10 verification, acyclic code integrity verification, cyclic code integrity verification, 
n secret key scattering, obfuscated function execution encryption/decryption, 

12 probabilistic checking, Boolean check obfuscation, in-lining, reseeding pseudo 

13 random number generators with time varying inputs, anti-disassembly methods, 
H varying execution paths between runs, anti-debugging methods, and time/space 
i s separation between tamper detection and response. 

17 16. (Original) A method as recited in claim 8, wherein the transforming 

is comprises applying a protection technique in which a checksum can be computed 

19 on a set of bytes of the digital good without actually reading the bytes. 

20 

21 17. (Original) A computer-readable medium comprising computer-readable 

22 instructions that, when executed by a processor, direct a computer system to 

23 perform the method as recited in claim 8. 

24 
2$ 

LSB * IfAYCS, PLLC 5 ATTOfcNBY DOCKBT NO MSI-515US 

RESPONSE TO FINAL OFFICE ACTION DATED FEBRUARY 35. 2005 ScrU No. 



PAGE 8/22 ' RCVD AT 5/25(2005 1:32:55 PM [Eastern Daylight Time] ' SVR:USPT0-EFXRF-1/2 ' DNIS:8729306 ' CSID:2QS3154004 1 DURATION (mm-ss):06-00 



MAY 25 2005 10:52 FR 00 



20631 54004 TO 1 7038729306 P . 09/22 



1 
2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 



18. (Currently Amended) A method comprising: 

establishing parameters prescribing a desired quantity of protection to be 
applied to a software produc t in generating a protected software product ; 
parsing the software product into code sections; 
selecting at least one code section; 

augmenting the selected code section to add protection qualitie s to generate 
an augmented code section; 

generating a checkpoint configured to cause a system receiving the 
augmented code section to attempt to validate that the augmented code section has 
not been tampered with; 

determining a checkpoint position for the checkpoint to be inserted in the 
protected software product the checkpoint position being outside of a position of 
the augmented code section and at an offset to the augmented section that is varied 
from additional checkpoint positions associated with other augmented code 
sections; and 

repeating the selecting and the augmenting for different code sections until 
the desired quantity of protection has been applied. 

19. (Original) A method as recited in claim 18 s wherein the establishing 
comprises enabling a user to enter the parameters. 
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20. (Original) A method as recited in claim 18, wherein the augmenting 
comprises applying a protection technique selected from a group of protection 
techniques comprising code integrity verification, acyclic code integrity 
verification, cyclic code integrity verification, secret key scattering, obfiiscated 
function execution, encryption/decryption, probabilistic checking, Boolean check 
obfuscation, in-lining, reseeding pseudo random number generators with time 
varying inputs, anti-disassembly methods, varying execution paths between runs, 
anti-debugging methods, and time/space separation between tamper detection and 
response. 

21. (Original) A method as recited in claim 18, wherein the augmenting 
comprises applying a protection technique in which a checksum can be computed 
on a set of bytes of the digital good without actually reading the bytes. 

22. (Original) A computer-readable medium comprising computer-readable 
instructions that, when executed by a processor, direct a computer system to 
perform the method as recited in claim 18. 

23. (Currently Amended) A production system, comprising: 
a memory to store an original digital good; and 

a production server equipped with a set of multiple protection tools that 
may be used to augment the original digital good for protection purposes, the 
production server being configured toi 

parse the original digital good and apply protection tools selected 
from the set of protection tools only to selected portions of the original digital 
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good in a random manner to produce a protected digital good having a composite 
of the protected selected portions; 

generate a plurality of checkpoints, each of the checkpoin ts being 
associated with one of the protected selected portions and causing a system 
receiving the protected digital eoodL upon encountering each of the checkpoints, to 
attempt to validate the protected selected portions associated with each of the 
checkpoints: and 

insert the plurality of checkpoints within the protected digital good, 
the positions of each of the plurality of checkpoints being one of variably offset 
and randomly offset outside of the protected selected portions with which each of 
the checkpoints is associated . 

24. (Original) A production system as recited in claim 23, wherein the 
protection tools are selected from a group of protection tools comprising code 
integrity verification, acyclic code integrity verification, cyclic code integrity 
verification, secret key scattering, obfuscated function execution, 
encryption/decryption, probabilistic checking 3 Boolean check obfuscation, in- 
lining, reseeding pseudo random number generators with time varying inputs, anti- 
disassembly methods, varying execution paths between runs, anti-debugging 
methods, and time/space separation between tamper detection and response. 

25. (Original) A production system as recited in claim 23, wherein the 
production server applies a protection tool that enables a checksum to be 
computed on a set of bytes of the digital good without actually reading the bytes. 



LBB A HAYES, 7LLC 

RESPONSE TO FINAL OFFICE ACTION DATED FEBRUARY 15. 2005 



ATTORNEY DOCKET NO. MS 1 -51 SL'9 
BerfelNo. 03/536,033 



PAGE 11/22 ' RCVD AT 5/2512005 1:32:55 PM [Eastern Daylight Time] " SVR:USPT0-EFXRF-1/2 ' DNISM29306 ' CS!D:2063154004* DURATION (mm-ss):06-00 



MAY 25 2005 10 = 52 FR 00 2063154004 TO 17038729306 P. 12/22 



j 26. (Original) A production system as recited in claim 23, wherein the 

2 production server has a pseudo random generator to introduce randomness into the 

3 application of the protection tools to various portions of the original digital good. 

4 

5 27, (Currently Amended) An obfiiscation system, comprising; 

6 a parser to parse a digital good into a plurality of segments; 

7 a set of protection tools that may be applied to the segments of the digital 
s good to augment the segments with protection qualities; 

9 a target segment selector to select at least one segment from the plurality of 

10 segments; end 

i j a tool selector to select at least one protection tool from the set of protection 

12 tools and apply the selected protection tool to the selected segment so that a 

13 protection tool of the set of protection tools is applied only to a selected segment 

14 of the plurality of segments to generate a plurality of protected selected segments: 
is and 

16 a checkpoint generator to create checkpoints for at least a portion of the 

17 protected selected seg ments , the checkpoints being assigned positions outside of 
jg the protected selected segments at variable positions relative to each of the 
ig protected selected segments, the checkpoints being operable to cause a system 

20 receiving the plurality of protected selected segments to attempt to validate 

21 authenticity of the protected selected segments . 

22 
23 
24 
25 

LBS* HAW*, m-LC 9 ATTORNEY DOCKET NO. MS 1-51 JUS 

RESPONSE TO FINAL OFFICE ACTION DATED FEBRUARY 3S, 2005 SwmI No. 00/536,033 



PAGE 12/22 ' RCVD AT 5/25/2005 1 :32:55 PM [Eastern Daylight Time] * SVR:USPT0-EFXRF-1/2 * DNIS:8729306 * CSID:2063154004 * DURATION £mm-ss):06-00 



MAY 25 2005 10:53 FR 00 



2063154004 TO 17038729306 P. 13/22 



1 

2 
3 
4 
$ 
6 
1 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 

24 

25 



28. (Original) An obfuscation system as recited in claim 27, wherein the 
protection tools are selected from a group of protection tools comprising code 
integrity verification, acyclic code integrity verification, cyclic code integrity 
verification, secret key scattering, obfuscated function execution, 
encryption/decryption, probabilistic checking, Boolean check obfuscation, in-, 
lining, reseeding pseudo random number generators with time varying inputs, anti- 
disassembly methods, varying execution paths between runs, anti-debugging 
methods, and time/space separation between tamper detection and response. 

29. (Original) An obfuscation system as recited in claim 27, wherein the target 
segment selector comprises a pseudo random generator to enable random selection 
of the segment. 

30. (Original) An obfuscation system as recited in claim 27, wherein the tool 
selector comprises a pseudo random generator to enable random selection of the 
protection tool. 

31. (Original) An obfuscation system as recited in claim 27, further 
comprising a quantitative unit to specify a quantity of protection qualities to be 
added to the digital good. 

32. (Currently Amended) A client-server system, comprising; 

a production server to randomly apply various forms of protection only to 
selected portions of a digital good to produce a protected digital goo d, the 
protected digital good including a plurality of one of variably and randomly placed 
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checkpoints configured to cause a system encountering the checkpoints to attempt 
to authenticate that the selected portions of the protected digital goo d have not 
been tampered with ; and 

a client to store and execute the protected digital good, the client being 
configured to,, upon encountering each of the checkpoints, to evaluate the selected 
portions of the protected digital good to determine whether the protected digital 
good has been tampered with. 



33. (Currently Amended) One or more computer-readable media having 
computer-executable instructions that, when executed, direct a computing device 
to: 

parse a digital good into a plurality of segments; and 

apply multiple different protection tools to only a selected portion of the 
segments in a random maimer to produce a protected digital good having a 
composite of variously protected portionsiand 

insert a plurality of checkpoints into the protected digital pood at positions 
one of variably and randomly offset from the variously protected portions, such 
that upon encountering each of the plurality of checkpoints, a receiving computing 
system attempting to execute the protected digital good will to authenticate that 
variously protected portions have not been tampered with , 

34. (Original) One or more computer-readable media as recited in claim 33, 
further comprising computer-executable instructions to randomly select the 
protection tools from a set of available protection tools. 
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35. (Original) One or more computer-readable media as recited in claim 33, 
further comprising computer-executable instructions to apply the protection tools 
to randomly selected portions of the original digital good. 

36. (Original) One or more computer-readable media as recited in claim 33, 
wherein the protection tools are selected from a group of protection tools 
comprising code integrity verification, acyclic code integrity verification, cyclic 
code integrity verification, secret key scattering, obfuscated function execution, 
encryption/decryption, probabilistic checking, Boolean check obfuscation, in- 
lining, reseeding pseudo random number generators with time varying inputs, anti- 
disassembly methods, varying execution paths between runs, anti-debugging 
methods, and time/space separation between tamper detection and response. 
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